Title:
BOTNET INSPECTION METHOD AND SYSTEM
Document Type and Number:
WIPO Patent Application WO/2010/031288
Kind Code:
A1
Abstract:
A botnet inspection method and system are disclosed in the network communication security field. The method includes the following steps: receiving a communication message from the network to be tested; picking up botnet message information of the communication message according to the communication message; picking up bot host IP and controller IP according to the botnet message information; inquiring about the account numbers corresponding to the bot host IP and the controller IP according to the picked bot host IP and the controller IP. The system comprises the following parts: network probe, monitoring and analysis center, and authentication server. The botnet inspection method inspects the botnet in real time, and can also respond to the botnet in real time, thereby solves the problem in prior art about the unavailability of realtime detection and response caused by the ex post analysis, avoids the harm caused by the botnet, and makes the network communications more secure.
Inventors:
LI ANKUN (CN)
Application Number:
PCT/CN2009/073338
Publication Date:
March 25, 2010
Filing Date:
August 19, 2009
Export Citation:
Assignee:
CHENGDU HUAWEI SYMANTEC TECH (CN)
LI ANKUN (CN)
LI ANKUN (CN)
International Classes:
H04L12/26; H04L12/56; H04L29/06
Foreign References:
| US20080005316A1 | 2008-01-03 |
Other References:
CAI JUN ET AL.: "Study on the Botnet Based on IRC and the Program For Detecting the Botnet", JOURNAL OF ZHONGYUAN UNIVERSITY OF TECHNOLOGY, vol. 19, no. 1, February 2008 (2008-02-01), pages 48 - 50
CAI JUN ET AL.: "Study on the Botnet and the Program For Detecting the Botnet", PROCEEDINGS OF THE ANNUAL MEETING OF SICHUAN INSTITUTE OF COMMUNICATION, vol. 2007, pages 326 - 329
CAI JUN ET AL.: "Study on the Botnet and the Program For Detecting the Botnet", PROCEEDINGS OF THE ANNUAL MEETING OF SICHUAN INSTITUTE OF COMMUNICATION, vol. 2007, pages 326 - 329
Attorney, Agent or Firm:
UNITALEN ATTORNEYS AT LAW (Scitech PlaceNo.22, Jian Guo Men Wai Ave., Chao Yang District, Beijing 4, CN)
Download PDF: